Gentoo Archives: gentoo-hardened

From: "Tóth Attila" <atoth@××××××××××.hu>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] RELRO and Xorg
Date: Fri, 25 Oct 2013 13:36:01
Message-Id: 0510cf410c3338c2a36a84d0a099fb12.squirrel@atoth.sote.hu
In Reply to: Re: [gentoo-hardened] RELRO and Xorg by Alexander Tsoy
1 2013.Október 25.(P) 15:18 időpontban Alexander Tsoy ezt írta:
2 > В Wed, 2 Oct 2013 22:58:35 +0200
3 > "Tóth Attila" <atoth@××××××××××.hu> пишет:
4 >
5 >> 2013.Október 2.(Sze) 21:07 időpontban Magnus Granberg ezt írta:
6 >> > onsdag 02 oktober 2013 20.41.32 skrev Alex Efros:
7 >> >> Hi!
8 >> >>
9 >> >> On Tue, Oct 01, 2013 at 09:21:00PM +0200, Hinnerk van Bruinehsen
10 >> wrote:
11 >> >> > > I can test proprietary nvidia if someone provide me with modified
12 >> >> ebuild
13 >> >> > > or patch or instructions what's to do.
14 >> >> >
15 >> >> > If you want to try, you could try the xorg-2.eclass from here:
16 >> >> I've tried both rebuilding only xorg-server first, restart X, then
17 >> >> rebuilde all x11-drivers/* packages and reboot (to reload kernel
18 >> >> module) - in both cases everything works fine with proprietary
19 >> nvidia.
20 >> >>
21 >> >> I've also tried nouveau and nv drivers, but got "Failed to load …
22 >> >> undefined symbol: …" errors (with different symbols for each driver).
23 >> >> Maybe this happens because some other libs should be recompiled, or
24 >> >> because of already loaded nvidia kernel module.
25 >> >
26 >> > When i tred nouveau and the radeaon driver i needed to define the load
27 >> > order of
28 >> > the drivers modules else i did get undefined symbols. On radeon i
29 >> could
30 >> > not
31 >> > even load some of the needed modules. But all this was some long time
32 >> ago.
33 >> > /Magnus
34 >> >
35 >> Aha!
36 >>
37 >> As a last step I also compiled radeon with full relro. And Xorg fails to
38 >> load.
39 >> The error message says:
40 >> Failed to load /usr/lib64/xorg/modules/drivers/radeon_drv.so:
41 >> /usr/lib64/xorg/modules/drivers/radeon_drv.so: undefined symbol:
42 >> exaWaitSync
43 >>
44 >> So radeon still needs lazy. But Xorg and other drivers are RELRO now.
45 >> I have to say the first load of X takes a bit longer than usuall - makes
46 >> sense because of the BIND_NOW...
47 >>
48 >> How I can define the load order of the modules?
49 >> I may play around with it. A bit more false sense of security! :-)
50 >>
51 >> Thx: Dw.
52 >
53 > Same problem with glamor. See comment 1 for an example of how to
54 > define the load order of modules.
55 >
56 > https://bugs.gentoo.org/show_bug.cgi?id=488906
57
58 Ahh, so this is the problem with glamor.
59 I've already figured out the way how to specify module loading order.
60 However I couldn't solve the radeon driver load problem with full relro.
61 My efforts weren't enough. Although I haven't considered fb module. So
62 I'll give it another try. And also retest glamor.
63
64 Thanks:
65 Dwokfur
66 --
67 dr Tóth Attila, Radiológus, 06-20-825-8057
68 Attila Toth MD, Radiologist, +36-20-825-8057